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ABSTRACT 

The  problem  of  system  state  estimation  in  the  presence  of  an  adver¬ 
sary  is  investigated  for  linear  dynamic  systems.  It  is  assumed  that 
the  adversary  injects  additive  false  information  into  the  sensor  mea¬ 
surement.  The  impact  of  the  false  information  on  the  Kalman  filter’s 
estimation  performance  is  analyzed  for  a  general  dynamic  system. 
To  be  concrete,  a  target  tracking  system  has  been  used  as  an  exam¬ 
ple.  In  such  a  system,  if  the  false  information  is  injected  only  once, 
the  effect  of  the  false  information  on  the  Kalman  filter  proves  to  be 
diminishing  over  time,  even  when  the  Kalman  filter  is  unaware  of  the 
false  information  injection.  The  convergence  rate  as  a  function  of  the 
maneuvering  index  is  analyzed.  If  the  false  information  is  repeatedly 
injected  into  the  system,  the  induced  estimation  error  proves  to  reach 
a  finite  steady  state.  Numerical  examples  are  presented  to  support  the 
theoretical  results. 

Index  Terms —  Kalman  filter,  linear  dynamic  system,  target 
tracking,  false  information  injection,  bias 

1.  INTRODUCTION 

System  state  estimation  in  the  presence  of  adversary  that  injects  false 
information  into  sensor  readings  is  an  important  problem  with  wide 
application  areas,  such  as  target  tracking  with  compromised  sensor 
data,  and  secure  monitoring  of  dynamic  electric  power  systems.  This 
topic  has  attracted  considerable  attention  and  interest  recently  [1-4]. 
In  [1],  the  authors  showed  that  in  some  cases,  an  adversary  can  intro¬ 
duce  arbitrary  errors  in  state  estimates  without  being  detected.  The 
close  relationship  between  these  attacks  and  power  system  observ¬ 
ability  was  discussed  in  [2],  where  both  the  adversary’s  attack  strate¬ 
gies  and  the  control  center’s  attack  detection  algorithms  have  been 
proposed.  False  data  attacks  on  electricity  market  have  also  been 
investigated  in  [3]  and  [4], 

In  this  paper,  for  a  linear  dynamic  system,  we  analyze  the  impact 
of  the  injected  false  information  on  the  Kalman  filter’s  state  estima¬ 
tion  performance  over  time,  which  has  received  little  attention  in  lit¬ 
erature.  Some  related  publications  exist,  where  the  problem  of  sen¬ 
sor  bias  estimation  and  compensation  for  target  tracking  has  been  ad¬ 
dressed.  Interested  readers  are  referred  to  [5]  and  references  therein 
for  details.  Note  that  these  previous  works  focus  on  bias  estimation 
and  compensation.  Instead  of  estimating  and  removing  the  bias,  in 
this  paper  we  concentrate  on  analyzing  the  effects  of  the  bias  on  state 
estimation  performance  over  time.  In  particular,  two  cases  are  con¬ 
sidered  where  false  information  is  injected  at  a  single  time  instant, 
and  it  is  injected  continuously  into  the  system,  respectively.  Through 
theoretical  derivations,  we  show  that  even  under  the  assumption  that 
the  Kalman  filter  is  unaware  of  the  false  information  injection,  the 
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impact  of  a  single  false  injection  converges  to  zero  asymptotically. 
Although  it  is  known  that  the  Kalman  filter  has  a  forgetting  property, 
to  the  best  of  our  knowledge,  the  effect  of  false  information  injec¬ 
tion  has  not  yet  been  rigorously  investigated  in  literature,  especially 
for  tracking  applications.  The  convergence  rate  will  be  characterized 
by  both  the  eigenvalues  and  the  determinant  of  the  bias  gain  matrix, 
which  will  be  derived  later  in  the  paper.  In  addition,  the  case  of  re¬ 
peated  false  infonnation  injection  is  considered.  It  is  shown  that  the 
Kalman  filter  cannot  forget  the  false  information  if  it  is  continuously 
injected.  However,  the  extra  estimation  error  due  to  injected  false 
information  does  reach  a  finite  steady  state  asymptotically. 

2.  SYSTEM  MODEL 

Let  us  consider  the  following  discrete-time  linear  dynamic  system, 

xfe+i  =  FfcXfc  +  GfcUfc  +  vfc  (1) 

where  x^  is  the  state  vector,  Uk  is  a  known  input  vector,  and  is 
the  sequence  of  zero-mean  white  Gaussian  process  noise  with  co- 
variance  F5[vfeV^]  =  Qfc.  The  measurement  equation  is 

z  k  =  HfcXfc  +  w  fc  (2) 

with  Wfc  the  sequence  of  zero-mean  white  Gaussian  measurement 
noise  with  covariance  ]  =  R^.  The  matrices  F*,  G ER, 

Q k,  and  R k  are  assumed  known.  For  such  a  linear  and  Gaussian 
dynamic  system,  the  Kalman  filter  is  the  optimal  state  estimator. 

In  this  paper,  we  assume  that  a  bias  b*,  is  intentionally  injected 
by  the  adversary  into  the  measurement.  Therefore,  the  measurement 
equation  (2)  becomes 

z'fc  =  Hfexfc  +  wfc  +  bfc  =  zfc  +  bfe  (3) 

where  bfc  is  either  an  unknown  constant  or  a  random  variable  (r.v.) 
independent  of  {v*,}  and  {w*,}. 

3.  IMPACTS  OF  FALSE  INFORMATION  INJECTION 
3.1.  General  Linear  Dynamic  Systems 

In  this  paper,  it  is  assumed  that  the  Kalman  filter  is  not  aware  of  the 
presence  of  the  false  information  (bias).  We  consider  two  cases.  In 
the  first  case,  the  false  infonnation  b  is  only  injected  once  into  the 
system  at  time  K.  We  call  this  particular  case  single  false  informa¬ 
tion  injection.  In  the  second  case,  the  false  information  is  continu¬ 
ously  injected  into  the  system  at  and  after  time  K  and  we  name  this 
case  continuous  false  information  injection. 
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3.1.1.  Single  False  Information  Injection 


3.2.  Linear  Time  Invariant  Systems 


In  the  single  injection  case,  the  extra  state  estimation  error  due  to  the 
single  bias  injection  is  derived  and  provided  in  the  following  lemma. 

Lemma  1.  The  extra  state  estimation  error  at  time  K  +  N  due  to 
the  single  bias  b  injected  at  time  K  is  Wxb, 

where 

Bfc  =  (I  —  WfcHfc)  Ffc_i  (4) 

and~W k  is  the  Kalman  filter  gain  [6]  at  time  K. 

Proof  Sketches:  At  time  K,  the  updated  state  estimate  xk|k  is 

^K\K  =  X-K\K-1  +  Wjc(zj{  —  ZK\K-l)  (5) 

where  Xx|rr-i  and  Zk\k-i  are  the  predicted  state  estimate  and  pre¬ 
dicted  measurement  respectively.  Now,  in  the  presence  of  the  addi¬ 
tive  bias,  the  updated  state  estimate  3i'K^K  is 

*K\K  =  *k\k  +  WKb  (6) 

At  time  K  +  1,  the  predicted  state  estimate  is 

^K+l\K  =  ^  Kyt-K\K  +  GKUK  =  *-K+l\K  +  FxWjfb  (7) 


In  general,  it  is  difficult  to  analyze  the  stability  of  a  time-varying 
system.  In  this  subsection,  we  focus  on  linear  time  invariant  (LTI) 
systems  with  constant  F,  H,  Q,  and  R  matrices.  To  further  simplify 
the  problem,  we  assume  that  the  Kalman  filter  has  reached  its  steady 
state  at  time  K,  so  that  its  gain  becomes  a  constant  too,  and  W*  = 
W,  Vfc  >  K. 

Given  these  assumptions,  in  the  single  injection  case,  the  system 
defined  in  (11)  becomes  a  LTI  system,  and  it  is  well  known  that 
the  system  is  asymptotically  stable  if  all  the  eigenvalues  of  B  = 
(I  —  WH)  F  have  a  modulus  smaller  than  one.  In  an  asymptotically 
stable  system,  for  an  arbitrary  initial  condition  Wb,  as  k  — t  oo, 
i>k  — >  0.  In  the  continuous  injection  case,  we  study  a  case  where 
the  false  information  b  is  repeatedly  injected  at  and  after  time  K. 
It  is  important  to  investigate  the  asymptotic  behavior  of  the  extra 
estimation  error  Bm)  Wb,  as  N  — >•  oo.  To  be  concrete, 

in  the  next  section,  we  study  a  target  tracking  example. 

4.  TARGET  TRACKING  EXAMPLE 

4.1.  Direct  Discrete-Time  Kinematic  Models 


and  the  predicted  measurement  is 
%k+i\k  =  Hrv+ixK+1|Jf  =  z-k+i\k  +  Hx+iFxWxb  (8) 
Combining  (7)  and  (8),  we  have 

*-'k+1\K+1  =  ^.'k+1\K  +~Wk+i(zk+1  —  Zk+i\k)  (9) 

=  xjr+i|x+i  +  (I  ~  Wjf+iHx+iJFjfWjfb 


We  assume  that  the  target  moves  in  a  1 -dimensional  space  according 
to  a  discrete  white  noise  acceleration  model  [6],  which  can  still  be 
modeled  by  the  plant  and  measurement  equations  given  in  (1)  and 
(2).  In  such  a  system,  the  state  is  defined  as  Xk  =  [£fc  £,k]T,  where 
and  denote  the  target’s  position  and  velocity  at  time  k  respec¬ 
tively.  The  input  u k  is  a  zero  sequence.  The  state  transition  matrix 
is 


Repeating  this  process  for  N  times,  finally  we  have 


^K+N\K+N  —  X K+N\K+N  +  (  B 


>K+N-i 


Wfib  (10) 


Q.E.D. 

From  Lemma  1  and  its  proof,  it  can  be  shown  that  the  evolution 
of  the  extra  estimation  error  zzfe  due  to  the  bias  injected  to  the  system 
at  time  K  can  be  modeled  by  a  linear  equation: 


izfe+i  =  Bfcj/fc  k  =  K,  K  +  1,  •  ■  •  (11) 


F  = 


1  T 
0  1 


(13) 


where  T  is  the  time  between  measurements.  The  process  noise  is 
Vfc  =  Tvk,  where  Vk  is  a  zero  mean  white  acceleration  sequence, 
with  variance  <r2,  and  the  vector  gain  multiplying  the  scalar  process 
noise  is  given  by  rT  =  [T2/2  T] .  The  covariance  matrix  of  the 
process  noise  is  therefore  Q  =  cr2rrT.  It  is  assumed  that  only 
position  measurements  are  available,  so  that  H  =  [1  0].  The  mea¬ 
surement  noise  process  is  zero  mean  white  with  variance,  a 


where  B^  is  the  bias  gain  matrix  defined  in  (4)  and  vk  =  W/fb 
is  the  initial  condition  for  the  system.  It  is  important  to  study  the 
stability  of  the  linear  system  defined  in  (1 1). 

3.1.2.  Continuous  False  Information  Injection 

In  the  continuous  injection  case,  the  extra  estimation  error  at  a  partic¬ 
ular  time  instant  K  +  N  due  to  the  bias  is  provided  in  the  following 
lemma.  Its  proof  is  similar  to  that  of  Lemma  1,  but  is  more  involved, 
which  is  skipped  here  for  brevity. 

Lemma  2.  The  extra  state  estimation  error  at  time  I\  +  N  due  to 
bias  bfc  injected  at  and  after  time  I\  is 

1 V  /m—  1  \ 

e  n*  K+N-i  S/Vx+N-mbK+N-m  (12) 

m= 0  \  i=0  / 

where  Ba'+jv-;  is  defined  in  (4),  and  k+n-i  =  I  is  an 

identity  matrix. 


4.2.  Analytical  Results  for  Single  Injection  Case 

Here  we  assume  that  the  bias  is  injected  only  once  into  z k  by  an 
adversary  at  time  K  when  the  Kalman  filter  has  already  reached  its 
steady  state.  It  is  shown  theoretically  in  this  paper  that  for  such  a 
tracking  system,  the  impact  of  the  bias  on  the  Kalman  filter  is  dimin¬ 
ishing  over  time.  Mathematically,  this  result  is  summarized  in  the 
following  theorem. 

Theorem  1.  The  two  eigenvalues  (ki  and  n.2  )  of  the  bias  gain  ma¬ 
trix  B  are  inside  the  open  unit  disk. 

Proof  Sketches:  The  steady  state  Kalman  filter  gain  for  such  a  system 
has  been  derived  [6],  which  is  W  =  [a  /3/T]t,  where 

a  =  -i  (A2  +  8A  -  (A  +  4)^A2  +  8A)  (14) 

/?=  i  (A2  +  4A  -  Ay/ A2  +  8A)  .  (15) 
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A  =  <jvT2 /<jw  is  the  target  maneuvering  index,  which  is  propor¬ 
tional  to  the  ratio  of  the  motion  uncertainty  and  the  observation  un¬ 
certainty.  It  is  easy  to  show  that 


Theorem  4  indicates  that  as  N  — >  oo,  the  extra  state  estimation 
error  due  to  the  repeated  injection  of  the  false  information  b  reaches 
a  steady  state, 


B  =  (I  -  WH)F 

'  1-a  (1  —  a)T 

-f  1-/5 

and  that  matrix  B  has  two  eigenvalues 


(16) 


Q 


o 

1 

1  —  K2 


Q  'WKb 


(20) 


Since  it  can  be  shown  that  /3  is  a  monotonically  increasing  function 
of  A,  as  A  increases,  det  (X^o  ®l)  decreases. 


2-a-/l±  V(«  +  /3)2-4/3 

« 1,  « 2  =  - j -  (17) 

We  consider  two  cases  where  A  <  8  and  A  >  8,  respectively.  In 
both  cases,  we  can  show  that  | ki  |  <  land|K2|  <  1. 

Q.E.D. 

From  Theorem  1  and  its  proof,  we  can  see  that  the  bias  has  a  di¬ 
minishing  impact  on  the  tracking  performance  of  the  Kalman  filter, 
which  asymptotically  converges  to  zero,  since  all  the  eigenvalues  of 
B  are  inside  the  open  unit  disc.  Further,  it  is  useful  to  investigate 
the  relationship  between  the  eigenvalues  of  B  and  the  target  maneu¬ 
vering  index  A.  In  a  stable  LTI  system,  it  is  the  eigenvalue  with  the 
largest  modulus  that  determines  the  rate  of  convergence.  The  rela¬ 
tionship  between  the  largest  eigenvalue  magnitude  and  A  is  provided 
in  the  following  theorem,  whose  proof  is  skipped  for  brevity. 

Theorem  2.  The  largest  eigenvalue  modulus  of  the  bias  gain  ma¬ 
trix  B  is  a  monotonically  decreasing  function  of  A  when  A  <  8; 
otherwise,  it  is  a  monotonically  increasing  function. 

Using  results  obtained  in  the  proofs  of  Theorems  1  and  2,  it  is 
easy  to  show  the  following  theorem. 

Theorem  3.  det.(B)  =  1  —  a  and  det/B  ^)  =  (1  —  a)N,  both  of 
which  are  monotonically  decreasing  functions  of  A. 

Theorem  2  shows  that  if  the  target  maneuvering  index  is  smaller 
than  8,  then  a  larger  A  leads  to  faster  convergence;  otherwise  when 
A  >  8,  a  larger  A  leads  to  slower  convergence.  If  we  consider  the 
determinant  of  B,  Theorem  3  shows  that  det/B  ^)  decays  exponen¬ 
tially,  with  a  faster  convergence  when  A  increases. 


5.  NUMERICAL  RESULTS 

In  this  section,  numerical  results  are  presented  for  both  the  single 
injection  case  and  the  continuous  injection  case. 

5.1.  Single  False  Information  Injection 

The  parameters  used  in  the  simulations  are  T  =  1  and  <rj  =  1.  The 
injected  bias  b  is  taken  as  a  zero  mean  Gaussian  r.v.  with  variance  a2. 
The  effect  of  the  bias  injection  on  the  Kalman  filter  is  measured  by 
the  time  required  for  the  MSE  to  become  consistent  with  the  nominal 
covariance  matrix  once  again,  using  a  chi-squared  test.  The  sum  of 
the  normalized  MSE  over  Nrn  Monte-Carlo  runs  is  given  by 

Nm  j, 

<Zfc  =  E  [xfc|fc  -  Xfc]  [xj.|k  -  Xfej  (21) 

i=l 

where  at  time  k.  P k\k  is  the  state  covariance  matrix,  and  xj. is 
the  state  estimate,  and  xj.  is  the  true  state,  during  the  ith  Monte- 
Carlo  run.  It  could  be  shown  that  qk  is  a  chi-squared  r.v.  with  2 Nm 
degrees  of  freedom,  in  the  absence  of  bias.  The  chi-squared  test 
compares  qk  with  a  threshold  q.  When  qk  <  q,  it  is  considered 
that  the  MSE  of  xjq*.  is  consistent  with  Pfc|j,.  q  is  determined  by 
solving  the  following  equation,  Pr  {qk  <  77}  =  1  —  e,  where  t  is 
a  small  number.  Here  we  run  JVm  =  1000  Monte-Carlo  runs,  and 
set  t  =  1CU4.  Correspondingly,  the  threshold  used  in  the  test  is 
q  =  2243.81. 

An  example  is  shown  in  Fig.  1,  where  a  single  random  bias 
is  injected  at  time  K  =  50.  It  can  be  seen  that  the  impact  of  the 
bias  only  lasts  for  several  time  steps  and  then  becomes  negligible. 
The  time  required  to  return  to  the  normal  state  is  shown  in  Table  1 


4.3.  Analytical  Results  for  Continuous  Injection  Case 

In  this  subsection,  let  us  assume  that  a  constant  bias  b  is  repeat¬ 
edly  injected  into  the  system  at  and  after  time  K.  To  analyze  the 
asymptotic  behavior  of  the  extra  estimation  error  due  to  the  contin¬ 
uous  bias  injection,  we  need  to  investigate  First,  let  us 

denote  Q  as  a  square  matrix  whose  columns  are  the  eigenvectors  of 
B.  Then  through  eigenvalue  decomposition,  and  using  properties 
of  the  eigenvalues  derived  in  Subsection  4.2,  we  give  the  following 
theorem  without  proof. 


Theorem  4.  As  N  - 
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Fig.  1.  Single  Injection  Case:  o2  =  5,  o2  =  2. 

for  varying  A  and  o2.  It  is  clear  that  when  A  <  8,  as  A  increases, 
the  time  to  return  to  the  normal  state  decreases;  when  A  >  8,  as 
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Table  1.  Time  required  to  return  to  normal  state 


A  increases,  the  time  to  return  to  the  normal  state  increases.  This 
is  exactly  as  predicted  by  Theorem  2.  Also,  we  can  observe  that  a 
random  bias  with  a  larger  variance  a2  has  a  longer-lasting  impact  on 
the  Kalman  filter.  But  eventually,  the  filter  will  return  to  the  normal 
state. 

5.2.  Continuous  False  Information  Injection 

In  this  subsection,  it  is  assumed  that  a  constant  false  information  b 
is  repeatedly  injected  in  the  measurement  at  and  after  time  K  = 
50.  The  normalized  MSE  qk  is  plotted  as  a  function  of  time  k  in 
Fig.  2.  We  observe  that  the  estimation  error  due  to  the  repeated 
injected  bias  asymptotically  reaches  a  finite  steady  state  as  shown  in 
Theorem  4.  A  similar  phenomenon  is  observed  for  the  case  where  an 
independent  and  identically  distributed  (i.i.d.)  random  bias  sequence 
is  continuously  injected  to  the  system.  The  corresponding  numerical 
example  is  skipped  due  to  limited  space.  Note  that  for  the  random 
bias  sequence  case,  the  theoretical  result  is  very  difficult  to  obtain. 

Fig.  3  shows  the  normalized  MSE  at  time  k  =  200  for  different 
b  and  A  values.  It  is  clear  that  as  A  increases,  the  MSE  decreases,  as 
indicated  in  Theorem  4.  Further,  we  observe  that  the  larger  the  bias 
b  is,  the  larger  the  steady  state  value  will  be. 


Fig.  2.  Continuous  Injection  Case:  b2  =  5  and  a 2  =  4. 


6.  CONCLUSIONS 

In  this  paper,  for  a  linear  system,  we  have  studied  the  problem  of 
state  estimation  in  the  presence  of  additive  false  information,  which 
is  injected  by  an  adversary  into  the  sensor  measurement.  For  a  gen¬ 
eral  linear  system,  the  impact  of  the  false  information  on  the  Kalman 


Fig.  3.  Continuous  Injection  Case:  The  curves  from  top  to  bottom 
correspond  to:  62  =  1000,  100,  50,  20,  10,  5,  1. 

filter’s  estimation  performance  over  time  was  derived.  Further,  to 
be  concrete,  an  example  target  tracking  system  has  been  provided, 
where  the  effect  of  the  false  information  on  the  Kalman  filter  was 
investigated.  In  the  case  of  single  false  information  injection,  it  has 
been  shown  that  the  system  that  models  the  bias  evolution  is  sta¬ 
ble,  and  the  impact  of  the  false  information  decays  exponentially. 
The  convergence  rate  was  also  analyzed  in  terms  of  both  the  largest 
eigenvalue  modulus  and  the  determinant  of  the  bias  gain  matrix.  In 
the  case  of  continuous  constant  false  information  injection,  the  finite 
steady  state  of  the  extra  estimation  error  due  to  bias  injection  has 
been  derived,  and  its  relationship  with  the  target  maneuvering  index 
was  investigated. 

In  the  future,  the  more  challenging  case  where  the  adversary 
injects  coordinated  random  false  information  over  multiple  sensors 
and  over  time  will  be  explored. 
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